Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.cer (raw, json)
Hash identifier: d9EyWo95XMD9hgad7x+ba1ja3xME+UPufLnomXBTm7A=
Subject key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DABCA16A1114E038A8B46EC17D7D9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200252
IP: 193.107.48.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bc:a1:6a:11:14:e0:38:a8:b4:6e:c1:7d:7d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3956794a7b9891115ad3af94573e7961b164bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:b1:a0:23:80:6d:46:66:3f:cf:13:ea:6e:
1f:0d:4f:a7:77:ec:ec:61:12:1c:68:85:54:25:b5:
2d:a2:4b:ed:fd:68:92:d4:d8:70:a4:32:b5:91:af:
aa:53:d8:fd:46:33:4a:c0:d4:fd:3a:d7:e1:19:44:
f7:bb:a6:71:80:5a:09:0d:a0:f0:ae:38:49:69:c0:
df:71:ed:ee:fb:af:24:85:f2:11:97:43:74:6f:ad:
82:ef:12:f2:61:ff:43:dd:ae:30:94:a8:41:11:23:
a5:34:f2:a7:78:eb:51:ab:52:33:18:47:ae:08:b1:
82:ab:e7:eb:35:8a:f9:33:5a:30:2b:a1:48:77:31:
d9:92:49:79:85:ef:dd:16:d4:89:4e:e9:2d:a2:15:
51:59:3c:30:9b:6c:a3:0a:b5:bc:62:73:81:06:d5:
84:41:01:b2:d5:dd:a1:0f:62:5d:2b:55:5e:6f:3c:
41:b7:e8:91:94:ba:2d:71:df:f7:89:8c:b1:11:af:
b0:85:a0:cc:e7:d3:af:7d:c5:ec:a6:5d:f6:8a:a1:
04:9e:21:b5:35:3a:91:0a:b6:b6:04:e1:74:0a:a6:
57:07:cc:c9:f6:74:7e:dd:fb:c7:cf:66:fa:75:e5:
f2:0a:e9:b3:85:24:7f:17:05:69:b1:b2:ae:e5:84:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.48.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200252
Signature Algorithm: sha256WithRSAEncryption
9c:4a:bb:ec:e0:1c:5c:97:7b:c8:ad:85:83:7c:16:05:b7:bf:
67:9f:09:69:58:0b:e8:f6:da:c8:77:ec:bb:97:2e:df:97:13:
8a:cb:10:73:ed:9d:de:8e:ea:1f:f8:46:a3:67:cd:6d:e3:2d:
aa:94:24:02:7f:68:dc:46:7a:a7:52:8a:10:9c:25:36:53:32:
d1:73:61:39:e9:9b:50:7f:a4:87:87:c2:38:19:1e:8b:46:86:
78:b2:be:f6:f4:bc:67:79:2b:11:9a:17:99:a7:61:ea:36:8f:
2d:50:4b:e3:c7:3e:ef:3c:6a:5c:b5:a4:6a:e6:32:96:31:a3:
75:f9:65:89:32:cf:e0:06:5b:84:61:90:88:3a:9e:25:c4:f8:
20:cb:9d:2f:7f:b2:d5:7f:71:9f:fe:96:c8:a7:ef:42:4e:55:
a2:24:18:13:c8:36:ac:2e:bd:cf:e0:22:d1:8e:d8:1d:2b:f6:
cc:bd:0f:ec:65:00:0b:56:aa:5e:18:e7:cc:02:d6:42:7a:23:
eb:f9:1d:ce:19:1f:a0:a7:48:83:b5:c2:3b:ce:49:e1:ed:5d:
5b:e1:07:36:ab:f7:05:47:ed:86:23:07:42:38:fa:1e:bc:d6:
01:c0:7a:99:69:2d:7f:32:c0:fd:14:1d:c7:63:4c:81:d8:ea:
7b:c1:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:49:53 2024 by rpki-client on console-fra.rpki-client.org